Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4641 7.5 重要
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-32292 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
4642 3.7 低
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-32293 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
4643 6.5 警告
Network 		オラクル PeopleSoft Enterprise FIN Contracts オラクルのPeopleSoft Enterprise FIN Contractsにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34300 2026-04-28 10:11 2026-04-21 Show GitHub Exploit DB Packet Storm
4644 3.7 低
Network 		Smallstep Step CA SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-40097 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
4645 8.2 重要
Network 		Saltcorn Saltcorn Saltcornにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40163 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
4646 6.1 警告
Network 		AdonisJS adonisjs/http-server
AdonisJS Core 		AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-40255 2026-04-28 10:11 2026-04-16 Show GitHub Exploit DB Packet Storm
4647 9.3 緊急
Local 		MinecAnton209 NovumOS MinecAnton209のNovumOSにおける複数の脆弱性 CWE-20
CWE-269
CVE-2026-40317 2026-04-28 10:11 2026-04-18 Show GitHub Exploit DB Packet Storm
4648 9 緊急
Local 		MinecAnton209 NovumOS MinecAnton209のNovumOSにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-40572 2026-04-28 10:10 2026-04-18 Show GitHub Exploit DB Packet Storm
4649 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月23日） - - 2026-04-27 13:37 2026-04-24 Show GitHub Exploit DB Packet Storm
4650 7.8 重要
Local 		Giskard Giskard Giskardにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 		CVE-2026-40320 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1321 7.3 HIGH
Network 		- - A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown function of the file /manage_tenant.php. The manipulation of the argument ID leads t… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10252 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1322 7.3 HIGH
Network 		- - A vulnerability was detected in itsourcecode Online House Rental System 1.0. This impacts an unknown function of the file /manage_payment.php. The manipulation of the argument ID results in sql injec… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10253 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1323 5.3 MEDIUM
Network 		- - A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. Th… New CWE-200
CWE-538
Information Exposure
 File and Directory Information Exposure 		CVE-2026-10254 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1324 5.3 MEDIUM
Network 		- - A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function sell_statement of the file application/controllers/ShowForm.ph… New CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-10255 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1325 6.3 MEDIUM
Network 		- - A vulnerability was identified in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /save_comment.php. The manipulation of the argument Name leads to sql… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10256 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1326 6.3 MEDIUM
Network 		- - A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/update_ss_img.php. The manipulation of the argument to… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10257 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1327 6.3 MEDIUM
Network 		- - A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the file /admin/add_sub_topic.php. This manipulation of the argument topic_id causes s… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10258 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1328 7.5 HIGH
Network 		google chrome Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page… Update CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-10009 2026-06-2 00:13 2026-05-29 Show GitHub Exploit DB Packet Storm
1329 8.8 HIGH
Network 		google chrome Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: … Update CWE-20
 Improper Input Validation  		CVE-2026-9969 2026-06-2 00:13 2026-05-29 Show GitHub Exploit DB Packet Storm
1330 8.3 HIGH
Network 		google chrome Use after free in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (C… Update CWE-416
 Use After Free 		CVE-2026-9970 2026-06-2 00:12 2026-05-29 Show GitHub Exploit DB Packet Storm